A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.01689.

Exploitation none

Automatable yes

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
unknown
Version Status Constraints
0 affected
≤ 3.6.16
3.7.0 affected
≤ 3.7.11
3.8.0 affected
< 3.8.8
3.8.9 unaffected
< *
Red Hat Red Hat Enterprise Linux 8 affected
Version Status Constraints
0:3.6.16-8.el8_10.3 unaffected
< *
Red Hat Red Hat Enterprise Linux 8 affected
Version Status Constraints
0:3.6.16-8.el8_10.3 unaffected
< *
Red Hat Red Hat Enterprise Linux 9 affected
Version Status Constraints
0:3.8.3-6.el9 unaffected
< *
Red Hat Red Hat Enterprise Linux 9 affected
Version Status Constraints
0:3.8.3-6.el9 unaffected
< *
Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions affected
Version Status Constraints
0:3.7.6-21.el9_2.4 unaffected
< *
Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support affected
Version Status Constraints
0:3.8.3-4.el9_4.2 unaffected
< *
Red Hat Red Hat Discovery 1.14 affected
Version Status Constraints
sha256:ad1045aa0de937c3a6969ec377f7bfeda9a44ee434a954e8245e9840316ffc1c unaffected
< *
Red Hat Red Hat Discovery 1.14 affected
Version Status Constraints
sha256:c960fa13577db72b52765d6941688f431f61fe38adb717b2d8bb6569e241bc5e unaffected
< *
Red Hat Red Hat Enterprise Linux 10 affected —
Red Hat Red Hat Enterprise Linux 6 unknown —
Red Hat Red Hat Enterprise Linux 7 unknown —
Red Hat Red Hat OpenShift Container Platform 4 affected —

No data.

Package CPE Advisory Released Date
Red Hat Enterprise Linux 8
gnutls-0:3.6.16-8.el8_10.3 cpe:/a:redhat:enterprise_linux:8 RHSA-2025:4051 2025-04-23T00:00:00Z
gnutls-0:3.6.16-8.el8_10.3 cpe:/o:redhat:enterprise_linux:8 RHSA-2025:4051 2025-04-23T00:00:00Z
Red Hat Enterprise Linux 9
gnutls-0:3.8.3-6.el9 cpe:/a:redhat:enterprise_linux:9 RHSA-2025:7076 2025-05-13T00:00:00Z
gnutls-0:3.8.3-6.el9 cpe:/o:redhat:enterprise_linux:9 RHSA-2025:7076 2025-05-13T00:00:00Z
Red Hat Enterprise Linux 9.4 Extended Update Support
gnutls-0:3.8.3-4.el9_4.2 cpe:/a:redhat:rhel_eus:9.4 RHSA-2025:8020 2025-05-20T00:00:00Z
Red Hat Discovery 1.14
registry.redhat.io/discovery/discovery-server-rhel9:sha256:ad1045aa0de937c3a6969ec377f7bfeda9a44ee434a954e8245e9840316ffc1c cpe:/a:redhat:discovery:1.14::el9 RHSA-2025:8385 2025-06-02T00:00:00Z
registry.redhat.io/discovery/discovery-ui-rhel9:sha256:492e412759cf0eedfa5b557f7b0865f8864f84d0ed75e11dc8d7a840837d9644 cpe:/a:redhat:discovery:1.14::el9 RHSA-2025:8385 2025-06-02T00:00:00Z

No data.

Subscriptions

Vendors Products
Redhat Subscribe
Discovery Subscribe
Enterprise Linux Subscribe
Openshift Subscribe
Rhel E4s Subscribe
Rhel Eus Subscribe

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4063-1 gnutls28 security update
Debian DSA Debian DSA DSA-5867-1 gnutls28 security update
EUVD EUVD EUVD-2024-50709 A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition.
Ubuntu USN Ubuntu USN USN-7281-1 GnuTLS vulnerability
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://access.redhat.com/errata/RHSA-2025:17361 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:4051 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:7076 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:8020 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:8385 cve-icon cve-icon
https://access.redhat.com/security/cve/CVE-2024-12243 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2344615 cve-icon cve-icon
https://gitlab.com/gnutls/gnutls/-/issues/1553 cve-icon cve-icon
https://gitlab.com/gnutls/libtasn1/-/issues/52 cve-icon cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2025/02/msg00027.html cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-12243 cve-icon
https://security.netapp.com/advisory/ntap-20250523-0002/ cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-12243 cve-icon
History

Tue, 24 Mar 2026 23:00:00 +0000

Type Values Removed Values Added
References

Mon, 06 Oct 2025 11:45:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhel E4s
CPEs cpe:/a:redhat:rhel_e4s:9.2::appstream
cpe:/o:redhat:rhel_e4s:9.2::baseos
Vendors & Products Redhat rhel E4s
References

Wed, 16 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00568}

 epss

{'score': 0.00463}

Mon, 02 Jun 2025 14:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat discovery
CPEs cpe:/a:redhat:discovery:1.14::el9
Vendors & Products Redhat discovery
References

Fri, 23 May 2025 14:30:00 +0000

Type Values Removed Values Added
References

Thu, 22 May 2025 09:15:00 +0000

Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:10

Wed, 21 May 2025 03:15:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:rhel_eus:9.4

Tue, 20 May 2025 23:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhel Eus
CPEs cpe:/a:redhat:rhel_eus:9.4::appstream
cpe:/o:redhat:rhel_eus:9.4::baseos
Vendors & Products Redhat rhel Eus
References

Wed, 14 May 2025 03:00:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:9

Tue, 13 May 2025 20:45:00 +0000

Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:9 cpe:/a:redhat:enterprise_linux:9::appstream
cpe:/o:redhat:enterprise_linux:9::baseos
References

Wed, 23 Apr 2025 15:15:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:8

Wed, 23 Apr 2025 11:00:00 +0000

Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:8 cpe:/a:redhat:enterprise_linux:8::appstream
cpe:/o:redhat:enterprise_linux:8::baseos
References

Fri, 21 Feb 2025 22:30:00 +0000

Type Values Removed Values Added
References

Mon, 10 Feb 2025 17:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 10 Feb 2025 15:30:00 +0000

Type Values Removed Values Added
Description No description is available for this CVE. A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition.
Title gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos
First Time appeared Redhat
Redhat enterprise Linux
Redhat openshift
CPEs cpe:/a:redhat:openshift:4
cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux
Redhat openshift
References

Mon, 10 Feb 2025 13:30:00 +0000

Type Values Removed Values Added
Description No description is available for this CVE.
Title gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS
Weaknesses CWE-407
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'}

threat_severity

Moderate
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2026-03-24T22:38:51.904Z

Reserved: 2024-12-05T14:26:25.188Z

Link: CVE-2024-12243

cve-icon Vulnrichment

Updated: 2025-05-23T13:11:00.539Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-02-10T16:15:37.423

Modified: 2026-03-24T23:17:07.753

Link: CVE-2024-12243

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-02-10T00:00:00Z

Links: CVE-2024-12243 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses